tocsin

Debian/sogo: medium 6.1

alinto SOGo 5.12.3 is vulnerable to Cross Site Scripting (XSS) via the "userName" parameter.

Action: Upgrade sogo to 5.8.0-2+deb12u1 or later.

Affected

introducedfixedlast affected
05.8.0-2+deb12u1-

Fixed versions

5.8.0-2+deb12u1

Sources

published · modified · JSON